At Whiddon, cyber security isn't just about protecting systems behind the scenes. The technology you secure supports our people every day to deliver care and services to residents, clients and families.

We've invested significantly in our cyber security capability, with an established program spanning Microsoft security technologies, managed detection and response, vulnerability and patch management, penetration testing, identity security and the Essential Eight.

Whiddon has invested in AI, automation, cloud and data technologies that are changing the way we work and support the delivery of aged care. As these capabilities continue to expand, you'll help ensure they are introduced and operated securely and responsibly.

If you want to solve challenging technical problems, implement real security improvements and see the difference your work makes, this could be the role for you.

Reporting to the ICT Operations Manager, you'll be the go-to cyber security subject matter expert within ICT, working closely with our Infrastructure, Applications, Data and Service Delivery teams and our technology and security partners. You will oversee our Managed SOC and ensure prompt and effective outcomes across the Cyber security spectrum.

This is a hands-on technical role. You won't simply identify risks and tell others what needs to change. You'll get into the technology, investigate the problem and help implement the solution.

What you'll be doing

As Whiddon's dedicated cyber security qualified, you'll take a hands-on role in protecting and strengthening our technology environment while helping shape our cyber security capability.

- Implement,



configure and continuously improve security controls across endpoints, servers, identity, Microsoft 365, Azure, cloud services and supporting infrastructure.

- Investigate and respond to cyber security incidents and threats, including technical analysis, containment, remediation, recovery and root-cause investigation.
- Configure and tune Microsoft Sentinel, SIEM, EDR/XDR and security monitoring capabilities, improving detections, alerting, logging and security use cases.
- Assess emerging CVEs, identify Whiddons exposure and drive vulnerability remediation across endpoints, servers, applications and third-party services.
- Implement and maintain controls across Microsoft Entra ID, Microsoft 365, Azure, Intune and Microsoft Defender, including MFA, Conditional Access, privileged access and identity protection.
- Work alongside Infrastructure to assess and strengthen firewall, network, server and remote-access security controls, including next-generation firewall technologies.
- Harden endpoints and servers through security baselines, attack surface reduction, application control, endpoint protection, secure configuration and risk-based patching.
- Undertake security testing, technical validation and remediation arising from penetration tests,



vulnerability assessments and security reviews.
- Continue to mature controls aligned with recognised frameworks, including the ASD Essential Eight and NIST Cybersecurity Framework, while strengthening email security, data protection and secure access.
- Take security improvements from assessment through technical design, testing, change management, deployment and validation, working with other ICT teams where changes span multiple platforms.
- Embed security into new projects, platforms and technology changes from the outset, including practical controls for Whiddons expanding AI, automation, SaaS and cloud capabilities.
- Contribute to cyber incident response, disaster recovery and technology resilience, including developing, maintaining and testing security playbooks.
- Support cyber risk, compliance and assurance activities, including security assessments, audit and cyber insurance requirements, translating technical findings into clear risks and remediation actions.
- Develop meaningful cyber security reporting and awareness initiatives that drive action, strengthen security culture and support continuous improvement.
- Act as the go-to cyber security specialist within ICT, providing practical technical guidance while remaining hands-on in implementing solutions.

At Whiddon, cyber security isn't just about protecting systems behind the scenes. The technology you secure supports our people every day to deliver care and services to residents, clients and families.

We've invested significantly in our cyber security capability, with an esta

📌 ICT Cyber Analyst (Sydney)
🏢 Whiddon
📍 Sydney